Sensitive Data Encryption Review

The reference pipeline selects fields and applies configured encryption processors. Key custody, authorization, rotation, and recovery are not included.

Before you adapt it

Resolve the example boundary before changing processors or destinations.

• An Expanso environment for configuration inspection
• Environment-managed key material and a documented access model
• Representative synthetic inputs and an expected output schema

Review path

1. Payment fields
2. Customer fields
3. Location fields
4. Advanced variants

Then inspect the Complete reference configuration.

Adaptation checks

• Verify processor and algorithm behavior in the target version.
• Test key lookup, unavailable-key, malformed-input, rotation, and recovery paths.
• Review retained and derived fields independently of encrypted fields.

This route is a configuration review, not a verified execution guide.